Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa
File:                     8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa (raw, json)
Hash identifier:          LxDK3ORz/FxOcV0JOZYHsyPmNUqCR9RuQb/sGCu219M=
Subject key identifier:   D3:BB:08:DA:89:FE:7C:A5:1C:FB:C7:08:47:CE:D3:CF:7E:E8:3E:0F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858450ABACEFBB25986ACC1DFA900
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     396982
IP address blocks:        130.41.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:ce:fb:b2:59:86:ac:c1:df:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=caf32ecd-e512-4325-a9b4-4719ccf536f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:91:b6:fe:4a:33:0a:ac:c1:47:d0:40:b8:
                    0c:c6:c0:e3:f6:e8:37:61:a9:6d:2c:7c:6e:bc:76:
                    1c:92:1a:5d:93:fa:01:87:3e:c8:d3:ab:2b:53:4f:
                    7a:d4:2c:d8:41:cc:49:46:5a:1c:db:00:0c:30:16:
                    fd:f0:8e:91:78:43:11:46:b3:af:ca:af:2f:dd:0f:
                    00:76:37:53:03:4b:c1:d8:a6:a7:8d:91:dc:74:44:
                    da:e6:9a:9f:4f:2b:74:cc:db:ae:03:b4:48:fd:03:
                    8d:2e:2e:8f:f7:e1:fc:ba:40:8c:87:eb:60:d3:b8:
                    c5:01:96:bc:d8:81:47:1b:42:b7:04:b2:04:67:ec:
                    61:58:0d:33:5d:fe:ab:d4:e1:1f:33:b9:2e:d5:56:
                    53:c7:c7:2a:af:43:e2:50:4c:41:da:e0:eb:42:cf:
                    3f:a9:ca:50:64:e9:bb:a2:bd:57:7e:3d:ea:31:21:
                    ae:51:db:f7:83:e1:0c:f9:98:44:56:90:b1:d8:14:
                    a5:83:c0:f5:1f:07:21:a0:b2:df:cf:9f:93:eb:16:
                    a0:e7:6b:c1:be:bd:da:9f:2d:ae:ed:9a:bf:30:7b:
                    8c:24:1e:77:06:3e:10:ad:c0:b8:d3:ed:09:6a:2f:
                    42:4f:e1:eb:04:71:d1:35:30:30:ce:dd:06:81:8a:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:08:DA:89:FE:7C:A5:1C:FB:C7:08:47:CE:D3:CF:7E:E8:3E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:46:b6:97:32:3d:01:a8:73:4f:0d:85:94:e0:64:d5:9e:
         44:d8:2d:7e:30:4c:0d:d2:dd:95:bb:a7:f1:e1:ee:54:67:88:
         ab:b5:54:0f:e6:ff:a1:73:d5:28:ab:49:7e:dd:88:d8:39:eb:
         d0:d7:6b:b7:6f:df:b3:77:ed:7b:f1:73:e7:c8:1d:bf:c9:1c:
         c3:d4:48:3f:9e:d2:e7:1d:90:6e:70:d4:80:8a:94:7a:28:93:
         52:ac:79:ba:c8:1b:aa:be:27:8c:ad:1e:d0:f3:b5:db:d2:a2:
         42:20:f5:46:d3:e0:d3:f4:a1:fd:19:6d:d2:0a:63:06:77:b5:
         e2:71:fb:06:eb:58:96:1d:e7:aa:60:e3:a7:ba:67:d7:00:df:
         33:17:8e:7b:a1:94:4d:a9:79:42:e5:db:e4:f4:ce:0a:87:28:
         c8:ed:27:a4:3a:2b:60:26:68:8c:54:dc:95:68:d3:19:c2:92:
         26:0d:b3:8c:ba:64:6e:33:6f:df:32:32:46:76:88:c2:1c:45:
         8f:38:b1:b0:3c:8f:98:6c:ed:0a:d8:d9:04:8a:4d:4e:9d:41:
         09:67:61:be:13:87:b7:89:b1:45:27:1d:1f:f3:c4:b0:c4:18:
         67:e5:0b:8f:95:da:21:32:f8:6e:af:31:ab:01:5a:be:29:10:
         40:db:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:44 2024 by rpki-client on console-ams.rpki-client.org